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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
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International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 
EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided by 
37 CFR 1.312. To ensure consideration of such an amendment, it MUST be submitted no 
later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
David Victor on May 3, 2010 

Claim 1. 

A method for accessing data in a read/write storage medium within one of a plurality of 
storage cartridges mounted into a plurality of interface devices, comprising: 
providing an association of at least one coding key to the plurality of storage cartridges^ 
wherein the coding key associated with the storage cartridge is used to decode and code 
data in the storage cartridge ; 

encryptin g, by a host device, the at least one coding keys key; 

[[and]] storing , by one of the plurality of interface devices, the encrypted coding key keys 
in at least one of the storage cartridges; 

receiving, by a receiving interface device comprising one of the plurality of interface 
devices, an Input/Output (I/O) request to a target storage cartridge comprising one of the 
plurality of storage cartridges; 
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mounting, by the receiving interface device, the target storage cartridge in response to the 
I/O request; 

reading, by the receiving interface device, the encrypted coding key from the mounted 
target storage cartridge; 

transmitting, by the receiving interface device, the read encrypted coding key to [[a]] the 
host device; 

producing a re-encrypted coding key by decrypting the transmitted encrypted coding 
key by the host device and re-encrypting the coding key by the host device with the 
public key of the receiving interface device; 

transmitting by the host device the re-encrypted coding key to the receiving interface 
device; 

receiving, by the receiving interface device, the re-encrypted coding key encrypted by the 

decrypting, by the receiving interface device, the re-encrypted coding key encrypted by 
the host to use for the I/O request ; 

performing a read or write operation in response to the I/O request by decoding read or 
write data using the decrypted re-encrypted coding key 

using, by the receiving interface device, the decrypted coding Icey to decode data to read 
in the target storage cartridge including the encrypted coding Icey in response to the I/O 
request comprising a read request; and 
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using, by the receiving interface device, the decrypted coding key to code data to write to 
the target storage cartridge including the encrypted coding Icey in response to the I/O 
request comprising a write request . 



Claim 2. 
(Canceled) 



Claim 7. 

The method of claim 1, wherein encrypting the coding key further comprises: 
encrypting, by the host device , the coding key with a first key, wherein the interface 
devices use a second key to decrypt the coding key encrypted with the first key. 



Claim 8. 

The method of claim 1, wherein encrypting the coding key further comprises: 
encrypting the coding key with a first key, wherein the host device uses a second key to 
decrypt the coding key encrypted with the first key, wherein the host device re-encrypts 
the coding key by re-encrypting the coding key with a third key, wherein the interface 
devices uses a fourth key to decrypt the re-encrypted coding key encrypted by the host 
device with the third key. 



Claim 9. 
(Canceled) 
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Claim 10. 

A method performed by an interface device for accessing data in a removable storage 
cartridge including a read/write storage medium coupled to the interface device, 
comprising: 

receiving an encrypted coding key encrypted by a host device, 

providing an association of at least one coding key to a plurality of storage cartridges; 
storing by the interface device the encrypting coding key in at least one of the plurality of 
storage cartridges; 

receiving an encrypted coding key from a host system with an Input/Output (I/O) request 
directed to [[the]] a target storage cartridge; 

mounting by the interface device the target storage cartridge in response to the I/O 
request; 

reading by the interface device the encrypted coding key from the mounted target storage 
cartridge; 

transmitting by the interface device the read encrypted coding key to [[a]] the host 
device; 

producing by the interface device a re-encrypted coding key by receiving from the host 
device a re-encrypted coding key comprising the transmitted encrypted coding key 
encrypted by a public key of the interface device, decrypting the re-encrypted coding 
key; and 
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performing by the interface device a read or write operation in response to the I/O request 
by decoding read or write data using the decrypted re-encrypted coding key 
using the decrypted coding Iccy to encode data to write to the storage medium in response 
to the I/O request comprising a write request; 

using the decrypted coding iccy to decode data written to the storage medium in response 
to the I/O request comprising a read request; and 

storing the received encrypted coding iccy in the storage medium to use for subsequent 
I/O requests . 

Claim 12. 

The method of claim 10, wherein the coding key is encrypted by a first key maintained at 
the host device system , further comprising; 

maintaining, by the interface device, a second key to decrypt data encrypted using the 
first key, wherein the interface device uses the second key to decrypt the coding key 
encrypted with the first key. 

Claim 16. 

The method of claim 10, wherein the received encrypted coding key is encrypted by a 
first key maintained at the host device system , wherein the host system device maintains 
a second key to decrypt data encrypted using the first key, wherein the interface device 
decrypts the encrypted coding key by: 
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receiving, with the I/O request, from the host device system , the second key encrypted by 
the host device system using a third key, wherein data encrypted using the third key is 
decrypted using a ft)urth key; 
accessing the fourth key; 

using the ft)urth key to decrypt the encrypted second key received from the host device 
system ; and 

using the decrypted second key to decrypt the received coding key encrypted using the 
first key. 

Claims 17-43. 
(Canceled) 

Claim 47. 

A system for accessing data in a read/write storage medium within one of a plurality of 
storage cartridges^ and to communicate with a host comprising: 
A processor; 

A memory connected to the processor, storing executable instructions that when executed 
by the processor causes the processor to perform the steps of: 

providing an association of at least one coding key to the plurality of storage cartridges^ 
wherein the coding key associated with the storage cartridge is used to decode and code 
data in the storage cartridge ; 

encryptin g, by a host device, the at least one coding keys key; 
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[[and]] storing , by one of the plurality of interface devices, the encrypted coding key keys 
in at least one of the storage cartridges; 

receiving, by a receiving interface device comprising one of the plurality of interface 
devices, an Input/Output (I/O) request to a target storage cartridge comprising one of the 
plurality of storage cartridges; 

mounting, by the receiving interface device, the target storage cartridge in response to the 
I/O request; 

reading, by the receiving interface device, the encrypted coding key from the mounted 
target storage cartridge; 

transmitting, by the receiving interface device, the read encrypted coding key to [[a]] the 
host device; 

producing a re-encrypted coding key by decrypting the transmitted encrypted coding 
key by the host device and re-encrypting the coding key by the host device with the 
public key of the receiving interface device; 

transmitting by the host device the re-encrypted coding key to the receiving interface 
device; 

receiving, by the receiving interface device, the re-encrypted coding key encrypted by the 

decrypting, by the receiving interface device, the re-encrypted coding key encrypted by 
the host to use for the I/O request ; 

performing a read or write operation in response to the I/O request by decoding read or 
write data using the decrypted re-encrypted coding key 
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using, by the receiving interface device, the decrypted coding key to decode data to read 
in the target storage cartridge including the encrypted coding Icey in response to the I/O 
request comprising a read request; and 

using, by the receiving interface device, the decrypted coding icey to code data to write to 
the target storage cartridge including the encrypted coding icey in response to the I/O 
request comprising a write request . 

Claim 50. 

The system of claim 47, wherein encrypting the coding key further comprises: 
encrypting, by the host device I/O manager encrypts the coding key with a first key, and 
wherein the interface devices controller use a second key to decrypt the coding key 
encrypted with the first key. 

Claim 51. 

The system of claim 47, wherein encrypting the coding key further comprises: 
encrypting the coding key with a first key, wherein the host I/O manager uses a second 
key to decrypt the coding key encrypted with the first key, wherein the host I/O manager 
encrypts the coding key by encrypting the coding key with a third key, wherein the 
interface devices controller uses a fourth key to decrypt the coding key encrypted by the 
host with the third key. 



Claim 54. 
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A system for accessing data in a removable storage cartridge including a read/write 
storage medium and in communication with a host device system , comprising: 
A processor; 

A memory connected to the processor, storing executable instructions that when executed 
by the processor causes the processor to perform the steps of: 
receiving an encrypted coding key encrypted by a host device, 

providing an association of at least one coding key to a plurality of storage cartridges; 
storing by the interface device the encrypting coding key in at least one of the plurality of 
storage cartridges; 

receiving an encrypted coding Iccy from a host system with an Input/Output (I/O) request 
directed to [[the]] a target storage cartridge; 

mounting by the interface device the target storage cartridge in response to the I/O 
request; 

reading by the interface device the encrypted coding key from the mounted target storage 
cartridge; 

transmitting by the interface device the read encrypted coding key to [[a]] the host 
device; 

producing by the interface device a re-encrypted coding key by receiving from the host 
device a re-encrypted coding key comprising the transmitted encrypted coding key 
encrypted by a public key of the interface device, decrypting the re-encrypted coding 
key; and 
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performing by the interface device a read or write operation in response to the I/O request 
by decoding read or write data using the decrypted re-encrypted coding key 
using the decrypted coding Iccy to encode data to write to the storage medium in response 
to the I/O request comprising a write request; 

using the decrypted coding iccy to decode data written to the storage medium in response 
to the I/O request comprising a read request; and 

storing the received encrypted coding iccy in the storage medium to use for subsequent 
I/O requests . 

Claim 55. 

The system of claim 54, wherein the coding key is encrypted by a first key maintained at 
the host device system , wherein the operations further comprise: 
maintaining a second key to decrypt data encrypted using the first key, wherein the 
interface device controller uses the second key to decrypt the coding key encrypted with 
the first key. 

Claim 59. 

The system of claim 54, wherein the received encrypted coding key is encrypted by a 
first key maintained at the host device system , wherein the host system device maintains 
a second key to decrypt data encrypted using the first key, wherein the controller 
interface device decrypts the encrypted coding key by: 
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receiving, with the I/O request, from the host device system , the second key encrypted by 
the host device system using a third key, wherein data encrypted using the third key is 
decrypted using a ft)urth key; 
accessing the fourth key; 

using the ft)urth key to decrypt the encrypted second key received from the host device 
system ; and 

using the decrypted second key to decrypt the received coding key encrypted using the 
first key. 

Claim 61. 

An article of manufacture comprising at least one of a non transitory computer readable 
storage media storing executable instructions and hardware including an Input/Output 
(I/O Manager) and controller for accessing data in a read/write storage medium within 
one of a plurality of storage cartridges mounted into a plurality of interface devices, 
wherein the executable instructions when executed perform the steps of : 
providing an association of at least one coding key to the plurality of storage cartridges^ 
wherein the coding key associated with the storage cartridge is used to decode and code 
data in the storage cartridge ; 

encryptin g, by a host device, the at least one coding keys key; 

[[and]] storing , by one of the plurality of interface devices, the encrypted coding key keys 
in at least one of the storage cartridges; 
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receiving, by a receiving interface device comprising one of the plurality of interface 
devices, an Input/Output (I/O) request to a target storage cartridge comprising one of the 
plurality of storage cartridges; 

mounting, by the receiving interface device, the target storage cartridge in response to the 
I/O request; 

reading, by the receiving interface device, the encrypted coding key from the mounted 
target storage cartridge; 

transmitting, by the receiving interface device, the read encrypted coding key to [[a]] the 
host device; 

producing a re-encrypted coding key by decrypting the transmitted encrypted coding 
key by the host device and re-encrypting the coding key by the host device with the 
public key of the receiving interface device; 

transmitting by the host device the re-encrypted coding key to the receiving interface 
device; 

receiving, by the receiving interface device, the re-encrypted coding key encrypted by the 

decrypting, by the receiving interface device, the re-encrypted coding key encrypted by 
the host to use for the I/O request ; 

performing a read or write operation in response to the I/O request by decoding read or 
write data using the decrypted re-encrypted coding key 
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using, by the receiving interface device, the decrypted coding key to decode data to read 
in the target storage cartridge including the encrypted coding key in response to the I/O 
request comprising a read request; and 

using, by the receiving interface device, the decrypted coding key to code data to write to 
the target storage cartridge including the encrypted coding key in response to the I/O 
request comprising a write request . 



Claim 66. 

The article of manufacture of claim 61, wherein encrypting the coding key further 
comprises: 

encrypting the coding key with a first key, wherein the host I/O manager uses a second 
key to decrypt the coding key encrypted with the first key, wherein the I/O manager host 
encrypts the coding key by encrypting the coding key with a third key, wherein the 
controller uses a fourth key to decrypt the coding key encrypted by the I/O manager host 
with the third key. 



Claim 68. 

An article of manufacture comprising at least one of a non transitory computer readable 
storage media storing executable instructions and hardware including an Input/Output 
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(I/O Manager) and a_controller in an interface device for accessing data in a read/write 
storage medium within one of a plurality of storage cartridges mounted into a plurality of 
interface devices, wherein the executable instructions when executed perform the steps 
o£ 

receiving an encrypted coding key encrypted by a host device, 

providing an association of at least one coding key to a plurality of storage cartridges; 
storing by the interface device the encrypting coding key in at least one of the plurality of 
storage cartridges; 

receiving an encrypted coding Iccy from a host system with an Input/Output (I/O) request 
directed to [[the]] a target storage cartridge; 

mounting by the interface device the target storage cartridge in response to the I/O 
request; 

reading by the interface device the encrypted coding key from the mounted target storage 
cartridge; 

transmitting by the interface device the read encrypted coding key to [[a]] the host 
device; 

producing by the interface device a re-encrypted coding key by receiving from the host 
device a re-encrypted coding key comprising the transmitted encrypted coding key 
encrypted by a public key of the interface device, decrypting the re-encrypted coding 
key; and 

performing by the interface device a read or write operation in response to the I/O request 
by decoding read or write data using the decrypted re-encrypted coding key 
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using the decrypted coding key to encode data to write to the storage medium in response 
to the I/O request comprising a write request; 

using the decrypted coding Icey to decode data written to the storage medium in response 
to the I/O request comprising a read request; and 

storing the received encrypted coding icey in the storage medium to use for subsequent 
I/O requests . 



Allowable Subject Matter 



2. Claims 1,3-5,7-8,10-16 and 44-75 are allowed over the prior art record. 



3. The following is an Examiner's statement of reasons for allowance: 

The closest prior art of record Shear et al. (US Patent Application Publication 
2001/0042043) teaches a rights management arrangement for storage media that provides 
enhanced, more flexible security techniques and methods when the same media are used 
with platforms having higher security capabilities. 

4. What they fail to teach or suggest: 
As per claims 1, 47 and 61 

None of the art of record, taken individually or combination disclose at least the 
steps/components of "producing a re-encrypted coding key by decrypting the transmitted 
encrypted coding key by the host device and re-encrypting the coding key by the host 
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device with the public key of the receiving interface device; transmitting by the host 
device the re-encrypted coding key to the receiving interface device; 
receiving, by the receiving interface device, the re-encrypted coding key; 
decrypting, by the receiving interface device, the re-encrypted coding key; 
performing a read or write operation in response to the I/O request by decoding read or 
write data using the decrypted re-encrypted coding key." 

As per claims 10, 54 and 68 

None of the art of record, taken individually or combination disclose at least the 
steps/components of "producing by the interface device a re-encrypted coding key by 
receiving from the host device a re-encrypted coding key comprising the transmitted 
encrypted coding key, encrypted by a public key of the interface device decrypting the re- 
encrypted coding key; and performing by the interface device a read or write operation in 
response to the I/O request by decoding read or write data using the decrypted re- 
encrypted coding key" 

5. These distinct features render claim 1,10, 47, 54, 61 and 68 allowable. 

Claims 3-5,7-8,10-16 and 44-75 are either dependant upon claims 1, 10, 47, 54, 61 and 
68 or contain similar limitations and are therefore allowable for at least the same reasons. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JOHN M. WINTER whose telephone number is 
(571)272-6713. The examiner can normally be reached on M-F 8:30-6, 1st Fridays off. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Calvin Hewitt can be reached on (571) 272-6709. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an apphcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

JMW 

/Calvin L Hewitt II/ 

Supervisory Patent Examiner, Art Unit 3685 



